Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

[SECURITY] Fedora 8 Update: rb_libtorrent-0.12-3.fc8

rblibtorrent is a C++ library that aims to be a good alternative to all the other BitTorrent implementations around. It is a library and not a full featured client, although it comes with a few working example clients. Its main goals are to be very efficient in terms of CPU and memory usage as we...

DEBIAN-CVE-2007-4771

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode ICU 3.8.1 and earlier allows context-dependent attackers to cause a denial of service memory consumption and possibly have unspecified other impact via a regular expression that...

Ubuntu 5.04 / 5.10 / 6.06 LTS : samba vulnerability (USN-314-1)

The Samba security team reported a Denial of Service vulnerability in the handling of information about active connections. In certain circumstances an attacker could continually increase the memory usage of the smbd process by issuing a large number of share connection requests. By draining all...

[SECURITY] Fedora Core 6 Update: libgtop2-2.14.9-1.fc6

libgtop is a library for portably obtaining information about processes, such as their PID, memory usage, etc...

Path Abuse in Cookies — Mozilla

Nicolas Derouet reported two problems with cookie handling in Mozilla clients. The first was that the cookie path parameter was not subject to any length checks, and this could be abused to cause the victim's browser to use excessive amounts of memory while it was running as well as waste the dis...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

Design/Logic Flaw

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

MS Windows NetrWkstaUserEnum() Remote DoS Exploit (0day)

No description provided by source. !/usr/bin/python MS Windows Workstation Service NetrWkstaUserEnum 0day Memory Allocation Remote DoS Exploit Bug discovered by h07 [email protected] Tested on:.. - Windows XP SP2 Polish - Windows 2000 SP4 Polish + All Microsoft Security Bulletins Example: wksdos.py...

Samba过多共享连接请求拒绝服务漏洞

Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的实现上存在意外情况处理失败的问题，远程攻击者可能利用此漏洞对Samba服务器执行拒绝服务攻击。 smbd守护程序维护着追踪文件和打印共享活动连接的内部数据结构。在某些环境下如果向smbd守护程序发送了大量的共享连接请求的话，就会导致持续增加smbd进程的内存占用率，造成拒绝服务。 Samba Samba 3.0.1 - 3.0.22 Debian ------ Debian已经为此发布了一个安全公告（DSA-1110-1）以及相应补丁:...

PT-2006-6396 · Alt N · Mdaemon

Name of the Vulnerable Software and Affected Versions: MDaemon versions prior to 9.50 Description: The issue allows attackers to cause a denial of service, resulting in memory consumption via unspecified vectors, leading to memory leaks. Recommendations: For versions prior to 9.50, update to...

openssl ASN.1 DoS

OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service infinite loop and memory consumption via malformed ASN.1 structures that trigger an improperly handled error condition...

CVE-2006-4333

The SSCOP dissector in Wireshark formerly Ethereal before 0.99.3 allows remote attackers to cause a denial of service resource consumption via malformed packets that cause the Q.2391 dissector to use excessive memory...

DEBIAN-CVE-2006-3629

Unspecified vulnerability in the MOUNT dissector in Wireshark aka Ethereal 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

USN-314-1: samba vulnerability

The Samba security team reported a Denial of Service vulnerability in the handling of information about active connections. In certain circumstances an attacker could continually increase the memory usage of the smbd process by issuing a large number of share connection requests. By draining all...

CVE-2006-0967

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service memory usage and cpu utilization via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usual...